CVE-2026-117xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

406 records · Page 2 of 5

• CVE-2026-117899: Use-after-free in the Networking: HTTP component Unscored

  Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117898: Use-after-free in the JavaScript Engine: JIT component Unscored

  Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117897: Incorrect boundary conditions in the Layout: Tables component Unscored

  Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117896: Use-after-free in the DOM: Core & HTML component Unscored

  Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117895: Use-after-free in the DOM: Core & HTML component Unscored

  Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117894: Incorrect boundary conditions in the WebRTC: Signaling component Unscored

  Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117893: Incorrect boundary conditions in the Security: PSM component Unscored

  Incorrect boundary conditions in the Security: PSM component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117892: Privilege escalation due to use-after-free in the WebRTC: Networking component Unscored

  Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117891: Use-after-free in the JavaScript Engine: JIT component Unscored

  Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117890: JIT miscompilation in the JavaScript Engine: JIT component Unscored

  JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117889: Incorrect boundary conditions in the JavaScript Engine component Unscored

  Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117888: Uninitialized memory in the Graphics: Canvas2D component Unscored

  Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117887: Use-after-free in the DOM: Core & HTML component Unscored

  Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117886: Incorrect boundary conditions in the Graphics: Text component Unscored

  Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117885: Use-after-free in the Layout: Grid component Unscored

  Use-after-free in the Layout: Grid component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117884: Use-after-free in the Networking component Unscored

  Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117883: Use-after-free in the DOM: HTML Parser component Unscored

  Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117882: Use-after-free in the Layout component Unscored

  Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117881: Use-after-free in the DOM: Core & HTML component Unscored

  Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117880: Use-after-free in the XML component Unscored

  Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117879: Incorrect boundary conditions in the Layout: Tables component Unscored

  Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117878: Other issue, use-after-free in the Storage: IndexedDB component Unscored

  Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117877: Use-after-free in the Layout: Text and Fonts component Unscored

  Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117876: Use-after-free in the Layout: Text and Fonts component Unscored

  Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117875: Use-after-free in the Layout: Scrolling and Overflow component Unscored

  Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117874: Use-after-free in the Internationalization component Unscored

  Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117873: Incorrect boundary conditions in the Audio/Video: Playback component Unscored

  Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117872: Use-after-free in the JavaScript: Standard Library component Unscored

  Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117871: Invalid pointer in the Graphics component Unscored

  Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117870: Use-after-free in the JavaScript Engine component Unscored

  Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117869: Use-after-free in the DOM: Core & HTML component Unscored

  Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117868: Sandbox escape in the DOM: Networking component Unscored

  Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117867: Use-after-free in the Layout component Unscored

  Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117866: Privilege escalation due to use-after-free in the Graphics: Canvas2D component Unscored

  Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117865: Use-after-free in the JavaScript: GC component Unscored

  Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117864: Sandbox escape in the Form Manager component Unscored

  Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117863: Information disclosure due to uninitialized memory in the Audio/Video component Unscored

  Information disclosure due to uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117862: Privilege escalation due to incorrect boundary conditions in the Networking component Unscored

  Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117861: Sandbox escape in the DOM: Navigation component Unscored

  Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation component Unscored

  Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

  Updated 2026-10-27
• CVE-2026-117859: Keycloak-services: keycloak-services: par single-use bypass via flow restart 5.4 Medium

  A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services component. The issue occurs when an authentication flow is restarted, which incorrectly clears the internal markers used to track PAR consumption while leaving the request active. This allows an attacker to reuse the same authorization request to obtain multiple access tokens, bypassing security requir

  Updated 2026-10-29
• CVE-2026-117858: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117857: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117856: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117855: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117854: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117853: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117852: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117851: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117850: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117849: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117848: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117847: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117846: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117845: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117844: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117843: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117842: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117841: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117840: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117839: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117838: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117837: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117836: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117835: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117834: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117833: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117832: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117831: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117830: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117829: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117828: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117827: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117826: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117825: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117824: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117823: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117822: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117821: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117820: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117819: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117818: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117817: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117816: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117815: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117814: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117813: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117812: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117811: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117810: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117809: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117808: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117807: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117806: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117805: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117804: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117803: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117802: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117801: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record
• CVE-2026-117800: Reserved in error; never associated with a vulnerability. Rejected

  Reserved in error; never associated with a vulnerability.

  Updated 2026-10-28 · Rejected record

Search a CVE ID or check dependency files →